Specifications

Appendix D: HTTPS Cluster Certificates
184 Equalizer Installation and Administration Guide
F. Enter a file name, e.g. C:\clustercert.pfx; then click Next.
G. C li c k Finish.
H. Click Ok if the export was successful.
I. The certificate is now ready to be uploaded to the cluster via the Equalizer
Administration Interface; see “Installing a Server or Client Certificate for an HTTPS
Cluster” on page 178.
Converting a Certificate from PEM to PKCS12 Format
Many browsers, such as FireFox and Internet Explorer, require private keys and certificates in
PKCS12 format for installation. In order to install client and intermediate certificates into these
browsers, you will first have to convert them from PEM format to PKCS12 format. (Note: if you
created your certificate using IIS as explained in the previous section, then your certificate is
already in PKCS12 format; it can be installed directly into a browser without conversion.)
Like PEM format, PKCS12 format supports having all your certificates and your private key in one
file, as discussed above in the section “Preparing a Signed CA Certificate for Installation” on page
177. If you followed the instructions in that section and created the file clientprivcert.pem
(containing the client certificate, the private key, and any intermediate certificates), then converting
the file to PKCS12 is simple:
openssl pkcs12 -export -in clientprivcert.pem -out clientprivcert.pfx
The resulting file, clientprivcert.pfx, can now be installed into all client browsers that will be
accessing the cluster that requires a client certificate.
In Internet Explorer, certificates are installed by selecting Tools > Internet Options from the
main menu, selecting the Content tab, and pressing the Certificates button. Select the Personal tab
and then the Import button.
In FireFox, certificates are installed by selecting Tools > Options from the main menu, selecting
Advanced, selecting the Encryption tab, and pressing the View Certificates button. When the
Certificate Manager appears, select the Your Certificates tab and then the Import button.